Windows Security Analyzer is a handy application that will run over 100 tests in order to gauge server security against all best practices. Some tests include explanations and background information. It also calculates entropy and NIST Special Publication 800-63 compliance.

The Windows Configuration Security Analyzer comes with a DOS batch script that system administrators can run on their servers to gather data for the Analyzer. Unlike other tools, the batch script is easy to read and understand so system administrators can be comfortable with the information they will extract from production servers.

I designed this tool to help with Information Systems security audits, but anyone can use it to evaluate their system security. An optional feature allows users to send anonymous statistics.